From a765016af06fff407b26fdce2cacb8fe4d24d0a1 Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Thu, 28 Jul 2022 13:01:14 +0530
Subject: [PATCH 1/4] Create springboot-caches.yaml

---
 .../springboot/springboot-caches.yaml         | 37 +++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 misconfiguration/springboot/springboot-caches.yaml

diff --git a/misconfiguration/springboot/springboot-caches.yaml b/misconfiguration/springboot/springboot-caches.yaml
new file mode 100644
index 0000000000..bb59ceab8e
--- /dev/null
+++ b/misconfiguration/springboot/springboot-caches.yaml
@@ -0,0 +1,37 @@
+id: springboot-caches
+
+info:
+  name: Springboot Actuator Caches  
+  author: ELSFA7110
+  severity: low
+  description: The caches endpoint provides access to the application's caches.
+  reference: 
+    - https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#caches
+  metadata:
+    verified: true
+  tags: springboot,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/actuator/caches"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "cacheManagers"
+
+      - type: word
+        part: header
+        words:
+          - "application/json"
+          - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
+          - "application/vnd.spring-boot.actuator.v2+json"
+        condition: or
+
+      - type: status
+        status:
+          - 200

From 35a896aa209850d5173f3bca3114d9974da01894 Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Thu, 28 Jul 2022 13:05:01 +0530
Subject: [PATCH 2/4] Update springboot-caches.yaml

---
 misconfiguration/springboot/springboot-caches.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/misconfiguration/springboot/springboot-caches.yaml b/misconfiguration/springboot/springboot-caches.yaml
index bb59ceab8e..4251291e74 100644
--- a/misconfiguration/springboot/springboot-caches.yaml
+++ b/misconfiguration/springboot/springboot-caches.yaml
@@ -1,11 +1,11 @@
 id: springboot-caches
 
 info:
-  name: Springboot Actuator Caches  
+  name: Springboot Actuator Caches
   author: ELSFA7110
   severity: low
   description: The caches endpoint provides access to the application's caches.
-  reference: 
+  reference:
     - https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#caches
   metadata:
     verified: true

From 653d9f8854ff93731c29f4137e054ff3185a9d8e Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Thu, 28 Jul 2022 13:31:02 +0530
Subject: [PATCH 3/4] Update springboot-caches.yaml

---
 misconfiguration/springboot/springboot-caches.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/misconfiguration/springboot/springboot-caches.yaml b/misconfiguration/springboot/springboot-caches.yaml
index 4251291e74..e0ceb182f3 100644
--- a/misconfiguration/springboot/springboot-caches.yaml
+++ b/misconfiguration/springboot/springboot-caches.yaml
@@ -14,8 +14,10 @@ info:
 requests:
   - method: GET
     path:
+      - "{{BaseURL}}/caches"
       - "{{BaseURL}}/actuator/caches"
 
+    stop-at-first-match: true
     matchers-condition: and
     matchers:
       - type: word

From f724ed4aa202e0ba758c517cee7296c7e332e8f0 Mon Sep 17 00:00:00 2001
From: Prince Chaddha <prince@projectdiscovery.io>
Date: Thu, 28 Jul 2022 19:26:37 +0530
Subject: [PATCH 4/4] Update springboot-caches.yaml

---
 misconfiguration/springboot/springboot-caches.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/misconfiguration/springboot/springboot-caches.yaml b/misconfiguration/springboot/springboot-caches.yaml
index e0ceb182f3..8b04409419 100644
--- a/misconfiguration/springboot/springboot-caches.yaml
+++ b/misconfiguration/springboot/springboot-caches.yaml
@@ -9,7 +9,7 @@ info:
     - https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#caches
   metadata:
     verified: true
-  tags: springboot,exposure
+  tags: misconfig,springboot,exposure
 
 requests:
   - method: GET